Question on using OneConnect (as referenced in contained article/link)

Re. Q2, yes, some dumb applications associate requests to sessions via IP addresses/connections instead of just looking at the session cookie in each request. I personally have seen instances of users being able to access other user's data because of connection multiplexing (not through F5, but the principle is the same). It's probably worth checking the Exchange deployment guide for more info.